4 ms·
> Because you have to physically do it, as opposed to hacking from anywhere else on the planet. My impression is that the adversarial image attacks in question
by JoshuaDavid 5y ago
> Because you have to physically do it, as opposed to hacking from anywhere else on the planet.
My impression is that the adversarial image attacks in question involve physically placing a sticker on something which will be in the view of self-driving cars -- it's not a remote exploit.
- d110af5ccf 5y agoWhich crime is easier to commit - physically swapping a street sign or placing a sticker on an existing one? How long does each act take? What equipment do you have to carry on you for each task? In a given span of time, how many street signs can a single person swap out versus how many stickers can they apply? When sourcing the materials for an attack, how expensive are stickers relative to physical signs?
- mlac 5y agoWhat’s the point of the attack? A well-placed sticker for the first car that comes along with a high value target? Just kill that person an easier way, that is more certain. After one accident, the sticker will be removed. Industrial sabotage to take out one car’s camera system? Ok - but which car company will do that? It’s mutually assured destruction if the other actors retaliate, and serious legal fees if caught. High school pranks? Sure. But again, they will be identified, finger printed, the printed item will be analyzed and reviewed for which printer printed it, and the person will be ID’d.